Description

Learn the detailed information you need to prepare for the incident response and recovery domain of the SSCP exam.

Tags

Syllabus

Syllabus IntroductionRespond to incidentsWhat you need to knowStudy resources1. Incident ManagementBuild an incident response programCreating an incident response teamIncident communications planIncident identificationEscalation and notificationMitigationContainment techniquesIncident eradication and recoveryValidationPost-incident activitiesIncident response exercises2. Investigations and ForensicsConducting investigationsEvidence typesIntroduction to forensicsSystem and file forensicsNetwork forensicsSoftware forensicsMobile device forensicsEmbedded device forensicsChain of custodyReporting and documenting incidentsElectronic discovery (ediscovery)3. Business ContinuityBusiness continuity planningBusiness continuity controlsHigh availability and fault tolerance4. Disaster RecoveryDisaster recovery overviewBackupsRestoring backupsDisaster recovery sitesTesting BC/DR plansAfter-action reports5. Emergency ResponseBuilding an emergency response planConclusionContinuing your studies Read more